Cross site request forgery (csrf)

2019-04-1717:29:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.7%

JSON

An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It allows CSRF.

CPENameOperatorVersion
gitlabge11.8.0
gitlablt11.8.1
gitlabge11.8.0
gitlablt11.8.1
gitlablt11.6.10
gitlabge11.7.0
gitlablt11.7.6
gitlablt11.6.10
gitlabge11.7.0
gitlablt11.7.6

Name	Operator	Version
gitlab	ge	11.8.0
gitlab	lt	11.8.1
gitlab	ge	11.8.0
gitlab	lt	11.8.1
gitlab	lt	11.6.10
gitlab	ge	11.7.0
gitlab	lt	11.7.6
gitlab	lt	11.6.10
gitlab	ge	11.7.0
gitlab	lt	11.7.6

References

about.gitlab.com/2019/03/04/security-release-gitlab-11-dot-8-dot-1-released/

about.gitlab.com/blog/categories/releases/

gitlab.com/gitlab-org/gitlab-ce/issues/55664